Microsoft · Security update · February 9, 2021

KB4601366: February 2021 security update

KB4601366, released February 9, 2021, fixes 12 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

Urgent1 publicly disclosedUnsupported product
CVEs closed
12
6 rated Critical
Exploited
0
None reported
Exploitation more likely
5
Microsoft's assessment
Highest EPSS
0.5896
99th percentile

Priority of the 12 CVEs

Patch now 0 Urgent 8 High 3 Routine 1

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2021-24086 Windows TCP/IPDenial of Service7.5 0.5896 More likely
Urgent CVE-2021-24074 Windows TCP/IPRemote Code Execution9.8 0.2616 More likely
Urgent CVE-2021-24094 Windows TCP/IPRemote Code Execution9.8 0.2214 More likely
Urgent CVE-2021-24078 Role: DNS ServerRemote Code Execution9.8 0.1189 More likely
Urgent CVE-2021-24077 Role: Windows Fax ServiceRemote Code Execution9.8 0.0287 Exploitation Less Likely
Urgent CVE-2021-1722 Role: Windows Fax ServiceRemote Code Execution8.1 0.0244 Exploitation Less Likely
Urgent CVE-2021-24088 Windows Print Spooler ComponentsRemote Code Execution8.8 0.0243 Exploitation Less Likely
Urgent CVE-2021-1727 Windows InstallerElevation of Privilege7.8 0.0076 DisclosedMore likely
High CVE-2021-1734 Windows Remote Procedure CallInformation Disclosure7.5 0.0381 Exploitation Less Likely
High CVE-2021-24103 Windows Event TracingElevation of Privilege7.8 0.0063 Exploitation Less Likely
High CVE-2021-24102 Windows Event TracingElevation of Privilege7.8 0.0055 Exploitation Less Likely
Routine CVE-2021-24080 Windows Trust Verification APIDenial of Service6.5 0.0305 Exploitation Less Likely
Showing 1 to 12 of 12 1

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.